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Top Stories 

• Crews recovered an estimated 3,906 gallons of crude oil, water, and other fluids from the 
Hilcorp Alaska Production-owned Tract 14 in North Slope, Alaska, after a pipeline leaked 
an unknown amount of liquid February 28. - KTUU 2 Anchorage (See item 1 ) 

• All lanes of Interstate 44 near Rolla, Missouri, reopened March 1 after closing February 28 
due to a multi- vehicle accident involving a bus that rear-ended a semi-truck causing it to 
overturn on westbound lanes, leaving 1 1 people injured. - KSDK 5 St. Louis (See item lh) 

• Uber found that their internal database was breached in May 2014 by an unidentified third- 
party who accessed the information of 50,000 former and current drivers. - Softpedia (See 
item 13 ) 

• A precautionary swimming advisory was issued March 1 until further notice for the beach 
area in Oleta River State Park in Miami after rainfalls caused about 5 million gallons of 
partially treated waste to overflow into surrounding wetlands. - WPLG 10 Miami (See item 

18 ) 
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Energy Sector 



1. March 1, KTUU 2 Anchorage - (Alaska) DEC, authorities addressing 4,000-gallon 
Hilcorp pipeline spill. Crews recovered an estimated 3,906 gallons of crude oil, water, 
and other fluids from the Hilcorp Alaska Production-owned Tract 14 at the Milne Point 
site in North Slope, Alaska, after a pipeline leaked an unknown amount of liquid 
February 28. Officials are investigating the leak and shut in wells at Tract 14, and 
closed valves on the affected section of the pipe. 

Source: http://www.ktuu.com/news/news/dec-authorities-addressing-40Q0gallon- 
hilcorp-pipe line-spill/3 1558574 

2. March 1, WWJ 62 Detroit - (Michigan) DTE works to restore power to almost 30K 
in Redford Township. DTE crews worked to restore power to the remaining 4,500 
customers following equipment damage at the Evergreen substation which knocked out 
service to approximately 30,000 customers March 1. Crews worked on fixing 11 
affected substations in the area. 

Source: http://detroit.cbslocal.com/2015/03/01/27000-without-power-in-redford- 
township/ 

T Return to top i 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

3. March 2, CNN Money - (National) Hyundai recalls 200,000 vehicles for power 
steering defect. Hyundai issued a recall February 28 for over 200,000 model year 
2008-2010 Elantra sedans and model year 2009-2010 Elantra Touring vehicles due to 
an electronic power steering system flaw that could result in a loss of steering 
assistance. No incidents related to the defect have been reported. 

Source: http://monev.cnn.com/2015/03/01/autos/hvundai-recall/ 

4. March 2, Softpedia - (International) Vulnerabilities in Blu-ray players open door for 
network compromise. Security researchers at NCC Group discovered security flaws in 
the software and hardware of Blu-ray players that could allow attackers to use poorly 
implemented Java to create malicious discs in order to bypass auto-run protection 
mechanisms through a sandbox escape and execute arbitrary code automatically. The 
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second vulnerability was achieved by launching a library from a USB drive plugged 
into the device and the Web browser which could allow modifications of the firmware 
in order to remove anti-piracy technology. 

Source: http://news.softpedia.com/news/Vulnerabilities-in-Blu-Ray-Plavers-Open- 
Door-for-Network-Compromise-474635.shtml 

5. February 27, Detroit Free Press; Associated Press - (National) FCA US recalls 
467,000 Durangos, Grand Cherokees. FCA US issued a recall February 27 for 
338,216 model year 2012-2013 Dodge Durango and model year 2011 Jeep Grand 
Cherokee SUVs in the U.S., for a relay circuit defect that could cause the fuel pump to 
deform and prevent a vehicle’s engine from starting or cause it to stall. 

Source: http://www.freep.com/storv/monev/cars/chrysler/2015/02/27/fca-recall-ieep- 
grand-cherokee-dodge-durango/24116427/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. February 28, Grand Rapids Press - (Michigan) West Michigan developer indicted in 
$8 million real estate mortgage ‘stacking’ fraud. Authorities arrested a part owner of 
the GBW Development real estate firm in Michigan during the week of February 23 for 
allegedly conspiring with the owner of Prime Title Service to defraud banks, private 
lenders, and real estate title insurance companies out of $8 million by taking multiple 
mortgages out on a single property without lenders’ knowledge. 

Source: http://www.mlive.com/news/grand- 
rapids/index.ssf/2015/02/west michigan developer indict.html 

7. February 27, U.S. Securities and Exchange Commission - (New York) SEC halts 
Ponzi-like scheme by purported venture capital fund manager in Buffalo. The U.S. 
Securities and Exchange Commission charged a New York-based supposed venture 
capital fund manager February 27 for allegedly using his firms Archipel Capital LLC 
and BIM Management LP to solicit money from investors for the purchase of 230,000 
pre-IPO Twitter shares, of which he only purchased 80,000 shares, and using 3 
unrelated funds and Ponzi-like payments with fake documents to pay investors. 

Source: http://www.sec.gov/litigation/litreleases/2015/lr23210.htm 

8. February 26, Reuters - (International) Texas brothers must pay $299 million in SEC 
fraud case: judge. A Texas man and his late brother’s estate were ordered to pay the 
U.S. Securities and Exchange Commission $299.4 million February 26 for allegedly 
engaging in securities fraud and earning $553 million in undisclosed profits by trading 
in Michaels Stores Inc., Sterling Software Inc., Scottish Annuity & Life Holdings Ltd. 
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now known as Scottish Re Group Ltd., and Sterling Commerce Inc. using trusts in the 
Isle of Man. 

Source: http://www.reuters.com/article/2015/02/27/sec-wylv- 



idUSLlN0W03Y820150227 
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Transportation Systems Sector 

9. March 2, Ventura County Star - (California) Amtrak train hits car near Camarillo, 
no one injured. No injuries were reported after an Amtrak Surfliner train hit a vehicle 
stuck on the tracks between Oxnard and Camarillo March 1. Several other cars were 
also struck and crews spend several hours removing passengers while they investigated 
the incident. 

Source: http://www.vcstar.com/news/local-news/camarillo/train-hits-vehicle-near- 
camarillo 68066777 

10. March 1, KSDK 5 St. Louis - (Missouri) 1-44 reopens after pileup near Rolla. All 
lanes of Interstate 44 near Rolla, Missouri, reopened March 1 after closing February 28 
due to a multi- vehicle accident that was initiated after a Greyhound bus rear-ended a 
semi-truck carrying Terester, a flammable and corrosive liquid, causing the semi-truck 
to overturn on westbound lanes. Eleven people were transported to an area hospital 
with injuries and crews cleaned up the toxic spill. 

Source: http://www.ksdk.com/story/news/traffic/2015/02/28/snowfall-causing-slick- 
roads-accidents/241 87955/ 

11. March 1, KTLA 5 Los Angeles - (California) Major mudslide prompts closure of 
PCH in Ventura County. A stretch of the Pacific Coast Highway in Ventura County 
was closed in both directions for at least 4 hours March 1 following a mudslide 
between Calleguas Creek and Mugu Rock after heavy overnight showers. 

Source: http://ktla.com/2015/03/01/maior-mud-slides-prompts-closure-of-pch-in- 
ventura-county/ 

12. March 1, Riverside Press-Enterprise - (California) San Bernardino Mountains: Hwy 
38 reopens after crashes. Highway 38 in Angelus Oaks between the San Bernardino 
Mountains and San Bernardino Valley was closed for over 3 hours March 1 due to a 
snow covered roadway that caused traffic accidents and disabled vehicles. 

Source: http://www.pe.com/articles/san-761400-bernardino-highwav.html 

13. February 28, Softpedia - (National) Uber data breach impacts 50,000 current and 
former drivers. Uber determined in September 2014 that their internal database was 
breached in May without authorization by an unidentified third-party who accessed the 
information of 50,000 former and current drivers, which included names and driver’s 
license numbers. Uber changed access protocols and locked down the database while 
continuing to investigate the incident. 

Source: http://news.softpedia.com/news/Uber-Data-Breach-Impacts-50-000-Current- 
and-Former-Dri vers-47 4515. shtml 
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14. February 28, Associated Press - (Texas) Dallas-area ice forces cancellation of nearly 
1,000 flights. Freezing rain and ice prompted the cancelation of approximately 1,000 
flights at Dallas-Fort Worth International Airport in Texas February 28 following the 
cancelation of 600 flights February 27 which forced about 5,000 travelers to spend the 
night at the airport. 

Source: http://abcnews.go.com/US/wireStory/dallas-area-ice-forces-cancellation- 
hundreds-flights-29293280 
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Food and Agriculture Sector 

15. March 2, KrebsOnSecurity - (National) Natural Grocers investigating card breach. 
Authorities are investigating a potential security breach of Natural Grocers’ database 
servers after financial institutions reported a pattern of fraud traced to the grocery chain 
that indicates payment card information may have been stolen. The company has 
upgraded the point-of-sale system in all of its locations while it continues to 
investigate. 

Source: https://krebsonsecuritv.com/2015/03/natural-grocers-investigating-card-breach/ 

16. March 1, U.S. Department of Agriculture - (New York) Oscar's Hickory House 
recalls beef jerky product due to processing deviation. Oscar ’s Hickory House Inc., 
issued a recall March 1 for about 32 pounds of its Oscar’s Adirondack Mountain 
Smokehouse Beef Jerky after a food assessment by the Food Safety and Inspection 
Service revealed that the product is susceptible to environmental pathogens due to a 
processing deviation and may pose human health risks. The affected product was sold 
by one New York-based retailer and sold via Internet sales. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-037-20 15-release 



17. February 28, U.S. Food and Drug Administration - (National) Talenti Gelato & 
Sorbetto issues allergy alert for limited number of jars of Talenti Gelato & 
Sorbetto Sea Salt Caramel Gelato due to undeclared peanut. The U.S. Food and 
Drug Administration reported February 27 that Talenti Gelato & Sorbetto issued a 
voluntary recall for a limited number of 1-pint jars of its Sea Salt Caramel Gelato 
because they may inadvertently contain undeclared peanuts in the form of peanut 
butter. The recalled product was distributed to retail stores nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm436020.htm 
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Water and Wastewater Systems Sector 

18. March 1, WPLG 10 Miami - (Florida) Precautionary swimming advisory issued for 
Oleta River. A precautionary swimming advisory was issued March 1 until further 
notice for the beach area in Oleta River State Park in Miami after rainfalls February 28 
caused about 5 million gallons of partially treated waste to overflow into surrounding 



-5 - 



wetlands. The Florida Department of Health and the Department of Regulatory and 
Economic resources are conducting tests on the affected waters. 

Source: http://www.locallO.com/news/precautionarv-swimming-advisorv-issued-for- 
oleta-river/3 1556444 



19. March 1, KHON 2 Honolulu - (Hawaii) Brown water advisory issued for 

Honokahua Bay. A brown water advisory for issued March 1 until further notice for 
Honokahua Bay in northwest Maui due to possible overflowing animal fecal matter, 
pathogens, and associated flood debris, among other runoff liquids following heavy 
rains in the region. 

Source: http://khon2.com/2015/03/01/brown-water-advisory-issued-for-honokahua- 
bay/ 
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Healthcare and Public Health Sector 

See item 31 
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Government Facilities Sector 

20. March 2, Washington Post- (Washington, D.C.) Two arrested in separate attempts 
to access White House grounds. Two individuals were arrested March 1 and March 2 
in separate incidents while attempting to gain access to the White House grounds in 
Washington, D.C. The first suspect tried to climb over a bicycle rack while the second 
suspect attempted to enter a construction site while a worker was leaving, before being 
confronted by an officer. 

Source: http://www.washingtonpost.com/local/crime/two-arrested-in-separate-attempts- 
to-access-white-house- grounds/20 1 5/03/02/c5bebd60-c0de- 1 1 e4-927 1 - 
610273846239 story.html 

21. March 2, WJW 8 Cleveland - (Ohio) All Painesville City Schools closed due to 
suspicious voice mail, phone call. Officials canceled classes at all schools in the 
Painesville City Local School District in Ohio March 2 after an individual called in 2 
bomb threats to Thomas W. Harvey High School, the second of which expanded the 
threat to all 6 schools. Police issued an all clear once nothing suspicious was found. 
Source: http://fox8.com/2015/03/02/high-school-elementarv-school-in-painesville- 
closed-others-on-lock-down-after-threat/ 

22. February 27, WXYZ 7 Detroit - (Michigan) Students injured in school bus accident 
in Pittsfield Township. Twenty-two students suffered minor injuries, 10 of which were 
transported to an area hospital for observation, following an accident between 2 school 
buses from Saline Area Schools in Pittsfield Township February 27. 

Source: http://www.wxyz.com/news/school-bus-accident-in-pittsfield-township- 
emegency-crews-on-scene 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

23. March 2, Help Net Security - (International) 0-day flaw in Seagate NAS devices 
endangers thousands. A security researcher discovered that certain firmware versions 
of Seagate Business Storage 2-Bay NAS devices are susceptible to an easily-exploitable 
zero-day remote code execution vulnerability due to outdated Web-enabled application 
management versions of Hypertext Preprocessor (PHP), Codeigniter, and Lighttpd 
technologies that contain known security issues. The company is reportedly working on 
the issue. 

Source: http://www.net-securitv.org/secworld.php ?id=l 8023 

24. March 2, Softpedia - (International) Privilege escalation glitch found in Toshiba 
software. SmartNet researchers discovered a path privilege escalation vulnerability in 
Toshiba’s Bluetooth Stack for Windows and Service Station that could allow attackers 
to take over control of computers by implementing malicious programs, and alter or 
delete information stored on hard disks. Toshiba released updates for its vulnerable 
products. 

Source: http://news.softpedia.com/news/Privilege-Escalation-Glitch-Found-in-Toshiba- 
Software-47 4649 . shtml 



For another story, see item 4 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



[ Return to top ] 



Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



25. March 2, WSYX 6 Columbus - (Ohio) Investigators to examine warehouse roof 
collapse. An Innotrac warehouse in Groveport remained closed March 2 following a 
roof collapse and electrical fire sparked by downed wires March 1 that rendered the 
building as structurally unsafe. The warehouse was evacuated and no serious injuries 
were reported. 

Source: http://www.abc6onvoursidc.com/ncws/fcaturcs/top-storics/storics/Warchouse- 
Roof-Collapses-Possibly-Iniuring-One-Person-92330.shtml 

26. March 2, WDAZ 8 Devils Lake - (Minnesota) Building cleared for families to return 
after lire at apartment complex in Moorhead. About 24 residents were cleared to 
reenter an apartment complex in Moorhead, Minnesota, March 2 after being 
temporarily displaced following a March 1 fire that caused between $60,000 and 
$75,000 in damage and prompted crews to cut power to the building. The cause of the 
fire remains under investigation. 

Source: http://www.wdaz.com/news/3690153-24-evacuated-following-fire-19th-12- 
street-moorhead 

27. March 2, WJAR 10 Providence - (Massachusetts) Fire causes heavy damage to 
Seekonk strip mall. A fire that started inside a craft store at a Seekonk strip mall in 
Massachusetts March 1 spread to adjacent businesses and caused a partial building 
collapse and heavy damage to the shopping center. The cause of the fire is under 
investigation. 

Source: http://www.turntol0.com/storv/28235034/fire-causes-heavv-damage-to- 
seekonk- strip-mall 

28. March 1, WGCL 46 Atlanta - (Georgia) Residents of evacuated retirement home 
staying in hotel another night. More than 200 seniors were transported February 28 
from the Trinity Towers Retirement Complex in Atlanta to an area hotel where they 
stayed for at least 2 nights while crews made repairs to a cracked pipe following a 
water main break. 

Source: http://www.cbs46.com/story/28232766/residents-of-evacuated-retirement- 
home-staying-in-hotel-another-night 

29. March 1, WXMI 17 Grand Rapids - (Michigan) Holland Twp. Walmart receives 
bomb threat. A Walmart Supercenter in Holland Township, Michigan, was evacuated 
for about 2 hours February 28 while authorities investigated a phoned bomb threat that 
claimed an individual had a bomb strapped to their chest. Authorities determined the 
call was a hoax and cleared the scene. 

Source: http://foxl7online.com/2015/03/01/holland-twp-walmart-receives-bomb-threat/ 

30. February 28, WBZ 4 Boston - (Massachusetts) Adults, children escape injury during 
major roof collapse at Canton ice rink. The Metropolis Skating Rink in Canton, 
Massachusetts, suffered a partial roof collapse under the weight of heavy snow 
February 28 that caused part of the structure’s walls to blow out. More than 20 
individuals were safely evacuated from the ice rink while the building was deemed a 
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total loss. 

Source: http://boston.cbslocal.com/2015/02/28/adults-children-escape-iniury-during- 
major-roof-collapse-at-canton-ice-rink/ 

31. February 28, KPRC 2 Houston - (Texas) Bellaire police search for 4 men who 
smashed stolen truck into CVS. Authorities are searching for four suspects that are 
believed to be responsible for crashing a stolen vehicle into a CVS store in Bellaire, 
Texas, February 28 during an attempted robbery of an ATM. The business remained 
closed most of the day while crews repaired store’s front entrance. 

Source: http://www.click2houston.com/news/bellaire-police-search-for-4-men-who- 
smashed-truck-into-cvs/3 1 545406 



32. February 27, WAVY 10 Portsmouth - (Virginia) VBFD: Pembroke Mall cleared of 
bomb threat. A section of the Pembroke Mall in Virginia Beach was evacuated and 
sectioned off for more than 2 hours February 27 while authorities investigated a fake 
bomb threat and a suspicious package that was found in the corridor of the mall’s main 
entrance. The area was cleared to reopen after police cleared the scene and determined 
that the package included broken phones. 

Source: http://wavv.com/2015/02/27/vbfd-pembroke-mall-cleared-of-bomb-threat/ 
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Dams Sector 

Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
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Contact Information 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 



- 10 - 




